5 ms·

Let's see if the deletion actually happens. GDPR didn't seem to have as many teeth as people were initially hoping for.

mhitza 5y ago
I was of the same impression until I've encountered this information last year https://www.enforcementtracker.com/?insights https://www.enforcementtracker.com/?insights
- dataflow 5y ago
  I'm not sure fines really tell the story here. Have big companies had a significant change in behavior as a result? Have major actors in any space (say) deleted data they'd gathered without legal basis?
  - mattashii 5y ago
    At least they must now put effort into their reasons for collecting data, and share this data with the subject; which was previously impossible or unfeasable. In that regard there have been significant changes.
    - dataflow 5y ago
      Sure, I'm not claiming GDPR has been useless. Just that if GDPR is any indication, this data won't get deleted.
  - krageon 5y ago
    Anecdotally, I have seen a significant uptick in cookie banners that are significantly more compliant. Sadly most companies still ask for things they do not need, but at least they aren't on by default anymore and the dark patterns are declining.
    - dataflow 5y ago
      My reply is essentially the same as to your sibling comment—yes, the situation does improve moving forward, and yes that's great; I'm not arguing it's bad. I'm just saying I have yet to see much evidence of retroactive corrections like deletion of existing data.
      - krageon 5y ago
        Nobody that hasn't signed an NDA can report on such deletion and as such you won't see news articles about it :)
- Nextgrid 5y ago
  This link always gets posted but if there's anything it proves is that the GDPR has a major enforcement problem. Your link shows that to date, ~1.4B euro worth of fines has been dished out - this is across all companies and countries in a span of 4 years. How much do Google and Facebook individually earn from illicit data collection & processing in just a single year? Significantly more than that. So far the only fine for Facebook is 51k (for a technicality, not actually related to their continuous GDPR breaches) and Google 50.6M which is more sizeable but still a drop in the bucket compared to their revenue.
feisar 5y ago
Agreed, i wouldn't be suprised if they just moved the data. Have you read Little Brother by Cory Doctorow? https://craphound.com/littlebrother/download/ https://craphound.com/littlebrother/download/
- dataflow 5y ago
  I have not! And yeah, I can't recall the last time I heard about an organization actually purging large amounts of data in response to a government order.
kzrdude 5y ago
Countries are run by people who follow the law, not by those policing it. I mean, it takes long time for a new framework of law to settle in, it will gradually have an effect on industry practice and citizen's expectations. We are "establishing new truths" here. I think it will have a good effect in the long run, even if it's not perfect.

I was of the same impression until I've encountered this information last year https://www.enforcementtracker.com/?insights https://www.enforcementtracker.com/?insights

dataflow 5y ago
I'm not sure fines really tell the story here. Have big companies had a significant change in behavior as a result? Have major actors in any space (say) deleted data they'd gathered without legal basis?
- mattashii 5y ago
  At least they must now put effort into their reasons for collecting data, and share this data with the subject; which was previously impossible or unfeasable. In that regard there have been significant changes.
  - dataflow 5y ago
    Sure, I'm not claiming GDPR has been useless. Just that if GDPR is any indication, this data won't get deleted.
- krageon 5y ago
  Anecdotally, I have seen a significant uptick in cookie banners that are significantly more compliant. Sadly most companies still ask for things they do not need, but at least they aren't on by default anymore and the dark patterns are declining.
  - dataflow 5y ago
    My reply is essentially the same as to your sibling comment—yes, the situation does improve moving forward, and yes that's great; I'm not arguing it's bad. I'm just saying I have yet to see much evidence of retroactive corrections like deletion of existing data.
    - krageon 5y ago
      Nobody that hasn't signed an NDA can report on such deletion and as such you won't see news articles about it :)
Nextgrid 5y ago
This link always gets posted but if there's anything it proves is that the GDPR has a major enforcement problem. Your link shows that to date, ~1.4B euro worth of fines has been dished out - this is across all companies and countries in a span of 4 years. How much do Google and Facebook individually earn from illicit data collection & processing in just a single year? Significantly more than that. So far the only fine for Facebook is 51k (for a technicality, not actually related to their continuous GDPR breaches) and Google 50.6M which is more sizeable but still a drop in the bucket compared to their revenue.

feisar 5y ago

Agreed, i wouldn't be suprised if they just moved the data. Have you read Little Brother by Cory Doctorow? https://craphound.com/littlebrother/download/ https://craphound.com/littlebrother/download/

dataflow 5y ago
I have not! And yeah, I can't recall the last time I heard about an organization actually purging large amounts of data in response to a government order.

kzrdude 5y ago

Countries are run by people who follow the law, not by those policing it. I mean, it takes long time for a new framework of law to settle in, it will gradually have an effect on industry practice and citizen's expectations. We are "establishing new truths" here. I think it will have a good effect in the long run, even if it's not perfect.